#
kubernetes-security
Here are 81 public repositories matching this topic...
brettcurtis
commented
Feb 5, 2022
Describe the issue
I wouldn't expect to get the alert if not defined explicitly.
Examples
https://github.com/hashicorp/terraform-provider-google/releases/tag/v4.0.0
Version (please complete the following information):
- Checkov Version 2.0.780
Kubernetes Goat 🐐 is a "Vulnerable by Design" Kubernetes Cluster. Designed to be an intentionally vulnerable cluster environment to learn and practice Kubernetes security 🔐
docker
kubernetes
infrastructure
security
microservices
helm
container
hacking
owasp
cloud-native
pentesting
cloudsecurity
devsecops
cloud-security
container-security
vulnerable-app
kubernetes-security
kubernetes-goat
-
Updated
Feb 14, 2022 - HTML
Curated resources help you prepare for the CNCF/Linux Foundation CKS 2021 "Kubernetes Certified Security Specialist" Certification exam. Please provide feedback or requests by raising issues, or making a pull request. All feedback for improvements are welcome. thank you.
kubernetes
security
policy
pod
certification
seccomp
apparmor
falco
exam-objectives
mitre-attack
open-policy-agent
kernel-hardening
kube-bench
pod-security-policy
cks
kubernetes-security
trivy
kube-hunter
ckss
os-footprint
-
Updated
Mar 3, 2022 - AGS Script
A Blazing fast Security Auditing tool for Kubernetes
docker
kubernetes
aws
security
devops
security-audit
automation
azure
containers
gke
infosec
security-tools
docker-security
container-security
aks
eks
informationsecurity
kubernetes-security
-
Updated
Sep 25, 2021 - Python
Kubernetes security notes and best practices
kubernetes
checklist
security
best-practices
kubernetes-cluster
attacker
vulnerabilities
kubernetes-security
-
Updated
Nov 29, 2021 - Shell
A curated list of awesome Kubernetes security resources
-
Updated
Dec 14, 2021
Metarget is a framework providing automatic constructions of vulnerable infrastructures.
kubernetes
container
target
cloud-native
vulnerabilities
kernel-exploitation
privilege-escalation
container-security
kubernetes-security
container-escape
cloud-native-security
vulnerable-infrastructure
vulnerable-scenes
vulnerable-infrastructures
-
Updated
Apr 2, 2022 - Python
KubeClarity is a tool for detection and management of Software Bill Of Materials (SBOM) and vulnerabilities of container images and filesystems. It scans both runtime K8s clusters and CI/CD pipelines for enhanced software supply chain security.
kubernetes
security
scanner
supply-chain
vulnerabilities
sbom
kubernetes-security
effortless-integrations
-
Updated
Apr 5, 2022 - Go
Kubernetes security tool for policy enforcement
-
Updated
Feb 28, 2022 - Go
MKIT is a Managed Kubernetes Inspection Tool that validates several common security-related configuration settings of managed Kubernetes cluster objects and the workloads/resources running inside the cluster.
-
Updated
Sep 16, 2021 - Dockerfile
Kubernetes Security Checklist and Requirements - All in One (authentication, authorization, logging, secrets, configuration, network, workloads, dockerfile)
kubernetes
checklist
security
devsecops
container-security
kubernetes-security
cloud-native-security
requirments
-
Updated
Dec 13, 2021
awesome resources about cloud native security 🐿
docker
kubernetes
serverless
container
cloud-computing
k8s
cloud-native
cloud-security
docker-security
container-security
serverless-security
kubernetes-security
container-escape
cloud-native-security
-
Updated
Apr 1, 2022
A curated list of Falco related tools, frameworks, blogs, podcasts, and articles
awesome
falco
kubernetes-security
falco-security
container-runtime-security
falcosidekick
sysdig-falco
falco-outputs
-
Updated
Jul 28, 2021
k0otkit is a universal post-penetration technique which could be used in penetrations against Kubernetes clusters.
reverse-shell
k8s
container-injection
container-security
kubernetes-security
post-penetration
container-escape
hack-k8s
fileless-attack
-
Updated
Aug 30, 2021 - Shell
References for CKS Exam Objectives - Certified Kubernetes Security Specialist
-
Updated
Oct 14, 2021
Container Security Workshop covering using Falco on Kubernetes.
-
Updated
Apr 30, 2021 - Python
flavio
commented
Mar 20, 2021
Right now policy-server will always download all the policies defined inside of the policies.yml file, even if they have already been downloaded.
This is sub-optimal, changing a policy setting requires to restart the policy-server, which then causes all the policies to be downloaded again.
Acceptance criteria
policies.ymlfile is extended to allow something similar to Kubernetes'
Shortlist of preparation materials to pass CKS exam
-
Updated
Oct 15, 2020 - HTML
Open
Improve test suite
andylibrian
commented
Oct 12, 2021
This issue is a placeholder for someone who wants to contribute to improve the test suite:
- unit tests
- end-to-end tests (with and without k8s)
See also contributing.md
Recreation of common Pod Security Policy configuration in other common Kubernetes policy engines
kubernetes
yaml
security
opa
k8s
psp
gatekeeper
hacktoberfest
policy-as-code
podsecuritypolicies
pod-security-policy
kubernetes-security
kyverno
kubewarden
podsecuritypolicy
-
Updated
Apr 5, 2022 - TypeScript
GCP GOAT is the vulnerable application for learn the GCP Security
-
Updated
Aug 10, 2021 - HTML
-
Updated
Jul 14, 2021 - Go
Simulates a compromise in a cloud and container environment
kubernetes
aws
security
cloud-security
cloud-forensics
kubernetes-security
cloudforensics
docker-forensics
kubernetes-forensics
aws-forensics
azure-forensics
container-forensics
-
Updated
Feb 16, 2022 - Shell
The Amazon Elastic Kubernetes Service (EKS) Creation Engine (ECE) is a Python command-line program created by the Lightspin Office of the CISO to facilitate the creation and enablement of secure EKS Clusters.
kubernetes
aws
security
devops
continuous-deployment
kubernetes-secrets
infrastructure-as-code
compliance
aws-security
kubernetes-deployment
devsecops
cloud-security
aws-kubernetes
container-security
kubernetes-security
cloud-sec-infra
-
Updated
Apr 4, 2022 - Python
Kubernetes Mutating and Validating Webhooks written in Sanic
-
Updated
Feb 28, 2022 - Python
A Kubewarden rust policy template to be used with cargo-generate
kubernetes
rust
webassembly
hacktoberfest
policy-as-code
kubernetes-security
kubewarden-policy-template
-
Updated
Feb 10, 2022 - Rust
Terraform provider to create OPA Gatekeeper v3 constraints and templates
-
Updated
Jun 30, 2020 - Go
Kubewarden Policy SDK for the Rust programming language
kubernetes
rust
rust-language
webassembly
hacktoberfest
policy-as-code
kubernetes-security
kubewarden-policy-sdk
-
Updated
Apr 4, 2022 - Rust
Crate used by Kubewarden that is able to pull policies from OCI registries and HTTP servers.
-
Updated
Apr 4, 2022 - Rust
Improve this page
Add a description, image, and links to the kubernetes-security topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the kubernetes-security topic, visit your repo's landing page and select "manage topics."
We could add support for the Rancher 2.2.x hardening guide. This would require a set of test files under a new
cfg/rancher-2.2directory.